15
+
YEARS OF
EXPERIENCE
1000
+
SUCCESSFUL
Projects
80
+
Satisfied
Clients
What is PCI DSS Compliance?
The Payment Card Industry Data Security Standard (PCI DSS Compliance) is an information security framework intended to protect cardholder data (CHD).
Created as a result of card payment processors and issuers’ concerns about data breaches, PCI DSS compliance entails a set of policies and procedures designed to prevent the misuse of cardholders personal information
Is PCI DSS Compliance mandatory in the UK?
While not a law, PCI DSS compliance is a security standard to which all businesses handling card payments must comply. Given that the vast majority of businesses handle card payments, PCI DSS compliance is effectively mandatory. Failure to comply with PCI DSS Compliance can result in financial penalties, damage to your company’s reputation, and in some cases, forced to cease trading.
There are different compliance levels depending on how many transactions your UK business process annually:
- Level 1 – Processing over six million transitions annually
- Level 2 – Processing one to six million transitions annually
- Level 3 – Processing 20,000 to one million transactions annually
- Level 4 – Processing less than 20,000 transactions annually
From an infrastructure perspective, what should I do?
| Build and maintain a secure network | – Install and maintain a firewall configuration to protect data – Do not use vendor-supplied defaults for system passwords and other security parameters |
| Protect cardholder data | – Protect stored cardholder data – Encrypt transmission of cardholder data across open, public networks |
| Implement strong access control measures | – Restrict access to cardholder data by business need-to-know – Assign a unique ID to each person with computer access – Restrict physical access to cardholder data |
| Create a vulnerability management program | – Use and regularly update anti-virus software or programs – Develop and maintain secure systems and applications |
| Monitor and test networks regularly | – Track and monitor all access to network resources and cardholder data – Regularly test security systems and processes |
| Develop an information security policy | – Maintain a policy that addresses information security for employees and contractors |
What are the steps in order to become PCI DSS Compliant?
- Compliance Level
You must identify your compliance level - SAQ or ROC
Level 2-4 Merchants – complete a Self-Assessment Questionnaire (SAQ)
or
Level 1 Merchants – complete an annual Report on Compliance (ROC) - AOC
Complete a formal Attestation of Compliance (AOC) - Network Scan
Complete a quarterly network scan by an Approved Scanning Vendor (ASV) - Submission
Submit the documents
Proxar IT Consulting can assist your London or UK located firm with becoming (or remaining) PCI DSS Compliant with our Network Scans. Our external vulnerability scanning services will identify security issues and holes to hackers which may be exploited. For more information please contact us
Choosing a reliable Cybersecurity Service Provider
Choosing the right cybersecurity service provider is crucial for the protection of your organization’s digital assets. In addition to assessing their experience and the range of services they offer, it is essential to consider their scalability and communication practices. Look for a provider that has a proven track record and positive reviews from other clients. Opt for a company that offers comprehensive services to address all your security needs and can adapt to the ever-evolving threat landscape. Transparent communication is key in ensuring that you are kept informed about potential risks and the measures being taken to mitigate them. By prioritizing these factors, you can effectively safeguard your organization’s valuable digital information.
schedule a call
answer time
satisfaction
score
on initial call
same business
day
